PT-2014-4264
CVE-2014-1626
·
تاريخ النشر
2014-01-26
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
MARC::File::XML module versions prior to 1.0.2
Description
The issue allows context-dependent attackers to read arbitrary files via a crafted XML file, potentially affecting products such as Evergreen, Koha, and perl4lib that utilize the MARC::File::XML module for Perl.
Recommendations
For MARC::File::XML module versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾